Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.mft
File: pnyqBsCo91QBbmFEgLuzh35AiR0.mft (raw, json)
Hash identifier: N4u3/6pDTwFpad3coSLL1czumh/LBuARMB5RVJgKW5o=
Subject key identifier: 29:ED:33:BB:54:54:28:F8:03:E6:EC:85:78:4C:5A:44:75:71:6A:BC
Authority key identifier: A6:7C:AA:06:C0:A8:F7:54:01:6E:61:44:80:BB:B3:87:7E:40:89:1D
Certificate issuer: /CN=a67caa06c0a8f754016e614480bbb3877e40891d
Certificate serial: 01984A77CC56D421AC4620878A5B106E5DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnyqBsCo91QBbmFEgLuzh35AiR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.mft
Manifest number: 032B
Signing time: Sun 27 Jul 2025 06:00:21 +0000
Manifest this update: Sun 27 Jul 2025 06:00:21 +0000
Manifest next update: Mon 28 Jul 2025 06:00:21 +0000
Files and hashes: 1: pnyqBsCo91QBbmFEgLuzh35AiR0.crl (hash: DUoAhmb0xiaopRkB39srwHDu3mSZxjuWhCV/bP5h/Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnyqBsCo91QBbmFEgLuzh35AiR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:cc:56:d4:21:ac:46:20:87:8a:5b:10:6e:5d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67caa06c0a8f754016e614480bbb3877e40891d
Validity
Not Before: Jul 27 06:00:21 2025 GMT
Not After : Jul 28 06:00:21 2025 GMT
Subject: CN=29ed33bb545428f803e6ec85784c5a4475716abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:af:68:41:af:89:e6:30:b9:e5:00:f5:e8:68:
7b:05:aa:13:2b:fa:74:77:f5:11:39:44:8a:b0:24:
93:44:a2:d9:9b:ae:ea:63:68:15:2f:95:44:b5:96:
75:86:e3:79:93:58:2d:8c:5e:d4:67:1b:ae:d6:a2:
28:40:b0:45:09:bf:4e:d6:bd:92:e6:4f:a6:ec:04:
83:90:42:62:be:b9:0e:e0:c8:d9:02:af:02:3e:e7:
db:cc:13:e3:d7:32:b8:b8:98:42:51:3a:59:ff:d8:
03:9c:ff:46:db:ae:e2:0c:62:17:a7:71:e8:71:b9:
01:c8:ca:e3:35:39:b8:18:ad:ac:a5:7f:92:91:f6:
37:d9:65:b6:65:46:5f:0d:5f:3d:da:67:63:1b:ba:
b9:c8:dc:c4:eb:55:47:24:15:e9:89:48:49:6d:b1:
8e:8d:7f:91:39:99:81:7d:ef:53:7a:0d:ff:e8:7f:
c2:d2:63:ff:7e:e5:7b:81:2d:52:87:7f:b6:60:e2:
8a:fe:64:d1:6d:c2:03:2e:7d:01:bc:7b:0f:07:e1:
b6:60:28:f9:ef:b7:50:9b:cb:f1:52:8d:2c:c0:90:
9f:14:36:d2:84:fd:2d:22:61:a6:61:f9:3c:d6:d4:
7c:e9:89:8e:9b:05:1d:b8:3a:68:53:81:48:cb:1f:
3d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:ED:33:BB:54:54:28:F8:03:E6:EC:85:78:4C:5A:44:75:71:6A:BC
X509v3 Authority Key Identifier:
keyid:A6:7C:AA:06:C0:A8:F7:54:01:6E:61:44:80:BB:B3:87:7E:40:89:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnyqBsCo91QBbmFEgLuzh35AiR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:93:63:54:c6:f7:a0:0b:3f:5d:c9:e3:5f:03:e8:d3:7c:86:
dd:c3:2d:7d:c9:50:90:0f:db:4c:a4:6f:f9:51:7a:21:79:41:
78:b0:47:04:94:c2:5f:54:6f:06:3e:7a:4e:cc:9c:55:a2:b2:
fd:d6:99:22:6f:21:2c:33:5b:df:2a:d7:72:e0:d8:26:27:ca:
0a:fb:e7:73:ea:22:f5:39:d1:7c:0b:dc:2f:32:ab:04:23:2b:
72:d2:53:22:13:82:a4:04:07:1b:f9:3b:a3:58:c9:fb:69:c0:
3a:90:6e:85:c3:ed:94:9d:1a:e1:f6:6f:c6:fc:cd:ab:07:de:
70:2f:d9:1c:7f:e1:2c:f5:65:f2:01:50:bb:f3:1e:f0:88:d3:
f4:d5:a5:5f:9f:70:f5:52:7b:d4:e8:9a:0e:69:cc:67:27:18:
ed:b0:8c:8f:09:33:5c:13:7e:c9:a5:b8:91:84:20:22:87:55:
c6:32:b4:1f:1f:c9:0f:23:0c:98:1a:f7:f9:6b:f7:ac:15:18:
19:7a:63:58:fe:0b:3f:c5:5a:ca:ed:49:fc:e3:60:70:21:82:
89:8b:93:10:53:7b:67:a1:a4:b4:7d:8f:0e:dc:34:5e:db:10:
1b:d6:97:fe:14:2a:8c:e7:23:10:ff:e5:d8:c2:7b:ca:1c:4b:
b1:91:81:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:52:07 2025 by rpki-client